Operating System - HP-UX
1748060 Members
5424 Online
108758 Solutions
New Discussion юеВ

Generate word list for password cracking

 
SOLVED
Go to solution
Michael Ernstoff
Frequent Advisor

Generate word list for password cracking

Does anyone know of any utilities (HP-UX or Windows or DOS) which can take a list of words/phrases and mutate them in various ways to use as an input file for a password cracker.

I am thinking of things like:
Restrict number of character between x and y
Convert letter O to zero, letter L to 1, etc
Add numeric suffix to specified length e.g. pwd123, pwd134, ...
Capitalise word
Reverse word
etc, etc.

Also any good sources of word/phrase lists would be useful.

Thanks in advance
8 REPLIES 8
James R. Ferguson
Acclaimed Contributor

Re: Generate word list for password cracking

Hi Michael:

Check out this:

http://www.openwall.com/john/

...JRF...
Michael Ernstoff
Frequent Advisor

Re: Generate word list for password cracking

I had a look at the site you recommended.
I can see password cracking programs, and hashing algorithms, but no programs to generate / mutate the word lists.
Am I missing something?
James R. Ferguson
Acclaimed Contributor

Re: Generate word list for password cracking

Hi Michael:

Sorry, I misunderstood the original question. Here's another link I found that, perhaps, will assist you:

http://www.multicians.org/thvv/gpw.html

...JRF...
Michael Ernstoff
Frequent Advisor

Re: Generate word list for password cracking

Still not what I am looking for.
Suppose I have a list of 10,000 words/phrases.
For each of those 10,000 I want to create variations of the type
Letter to number (O to 0)
Capitalise first letter
Create numberic suffix to standard length
etc.

My output file would be a wordlist of at least tens of thousands, possibly hundreds of thousands.
I could then use this output file, as an input file to a password cracker that I already have.
Mark Vollmers
Esteemed Contributor

Re: Generate word list for password cracking

I don't know if this would help or not, but it's worth a thought. If you know the mutations that you want to use (l to 1, O to 0), you might be able to script out something that would use vi to search and replace all instances in this file
(:s/l/1/g command in vi, for example).
You could take the new list and append it to the old list so you would have all the words. It would have to be a fairly large program, though, to cover all the options. I'm not a scripting guru, so I'm not sure about how this can be done. Maybe someone out there with a lot of scripting background can tell if it is feasible.
"We apologize for the inconvience" -God's last message to all creation, from Douglas Adams "So Long and Thanks for all the Fish"
Ralf Hildebrandt
Valued Contributor

Re: Generate word list for password cracking

http://www.users.dircon.co.uk/~crypto/

Alec Muffet's crack does what you want. It takes an arbitray number of dictionaries, permutes letters for numbers (like 3l33t being eleet being elite) and compares their crypted values with the entries in /etc/passwd
Postfix/BIND/Security/IDS/Scanner, you name it...
Alexander Peslyak
New Member
Solution

Re: Generate word list for password cracking

Michael,

What you're asking for is one of the features of the more advanced password crackers, including Crack and John. If for some reason you need to generate a mutated wordlist only, then the command line to use with John is:

./john -w:source-word-file -rules -stdout > mutated-word-file

and the rules are specified in john.ini (or john.conf). See john-1.6/doc/RULES for the syntax (which is an extension to that used by Crack 5).

The wordlists to use with this you may obtain at:

ftp://ftp.zedz.com/pub/crypto/wordlists/
ftp://sable.ox.ac.uk/pub/wordlists/
Michael Ernstoff
Frequent Advisor

Re: Generate word list for password cracking

This looks more like what I am after (generating the mutated word list via John).
I will give it a try and then assign the points.